Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
File:                     E_OtQPlu1efznY2eGWq_D6I4How.mft (raw, json)
Hash identifier:          q/hO4wESrhkbcyff2S/m6u89KIu7E5RP9z9kcOXWstQ=
Subject key identifier:   47:35:F5:BF:1E:0C:F9:93:DF:F7:E4:A3:5B:0E:A4:42:CF:AE:08:ED
Authority key identifier: 13:F3:AD:40:F9:6E:D5:E7:F3:9D:8D:9E:19:6A:BF:0F:A2:38:1E:8C
Certificate issuer:       /CN=13f3ad40f96ed5e7f39d8d9e196abf0fa2381e8c
Certificate serial:       0199FB45C550AC61CEF92B15B19AC66EC82B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
Manifest number:          1227
Signing time:             Sun 19 Oct 2025 07:01:17 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:17 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:17 +0000
Files and hashes:         1: E_OtQPlu1efznY2eGWq_D6I4How.crl (hash: aOL9BLQJpC7a99gpkxJfvU54oyceRG4qTyIYpaSSYIg=)
                          2: z7S0Dz882RLcbziuzTp5d0_DNew.roa (hash: KUS+jL9qYhHGYv1E9XE/X3yjSFhxo3sbNNAyJ3Cg4aE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:c5:50:ac:61:ce:f9:2b:15:b1:9a:c6:6e:c8:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f3ad40f96ed5e7f39d8d9e196abf0fa2381e8c
        Validity
            Not Before: Oct 19 07:01:17 2025 GMT
            Not After : Oct 20 07:01:17 2025 GMT
        Subject: CN=4735f5bf1e0cf993dff7e4a35b0ea442cfae08ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f2:de:ad:7b:32:93:b5:33:f3:e5:7c:18:85:
                    9d:ab:55:66:c4:47:a4:2d:18:80:d4:33:89:01:17:
                    fa:39:d2:d1:48:d8:8d:a2:97:49:f6:d9:1c:61:c7:
                    d2:05:1a:c0:61:97:37:79:d5:68:e0:96:de:4c:c9:
                    74:49:51:36:9a:1b:65:48:58:84:23:39:d8:71:a3:
                    e8:eb:fe:ae:29:32:cf:96:13:1b:87:f0:c2:23:d1:
                    51:90:57:fa:5c:23:b9:3a:e2:23:f5:47:5b:84:ca:
                    21:d2:1f:67:9e:89:4f:e8:25:93:77:eb:93:3a:9d:
                    bd:13:21:ea:09:b2:4f:0b:b7:10:c7:6b:8f:d9:95:
                    eb:a3:2c:17:60:fe:4a:7d:72:a5:8e:0f:52:e1:37:
                    2b:31:ab:5a:4e:1e:a3:5d:10:a1:28:0a:42:cc:f1:
                    b5:ab:03:f2:87:2f:3c:ef:ea:8e:8a:23:fd:7c:ce:
                    af:c5:f8:b6:a2:71:c5:a7:c4:22:bf:ea:be:dd:c0:
                    37:21:d6:86:2b:e4:ab:d5:3d:81:f9:ce:44:b9:54:
                    8e:b5:b4:48:88:ed:33:1a:66:55:3c:09:0a:3f:68:
                    58:17:18:ee:cb:e6:f9:96:dc:0f:8b:c6:32:a7:17:
                    1b:17:78:3d:af:54:67:af:a1:fc:da:da:7a:82:92:
                    d4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:35:F5:BF:1E:0C:F9:93:DF:F7:E4:A3:5B:0E:A4:42:CF:AE:08:ED
            X509v3 Authority Key Identifier:
                keyid:13:F3:AD:40:F9:6E:D5:E7:F3:9D:8D:9E:19:6A:BF:0F:A2:38:1E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:6b:b4:97:6c:3f:ab:eb:d1:cf:7b:f8:dc:b4:95:d4:72:5d:
         b5:64:f1:11:a0:a0:af:7e:82:11:11:dd:a5:5c:85:c3:cb:3c:
         21:52:a3:84:d8:af:8d:cf:88:76:d9:ea:bd:e2:64:03:72:89:
         36:86:9b:35:bd:26:dc:53:0a:2b:31:f5:1e:0f:7a:a3:0b:90:
         01:59:dd:74:1c:85:68:04:bc:db:20:df:40:d4:d9:55:45:ec:
         53:1b:9e:07:06:ea:2d:33:e2:c3:02:e6:15:df:ef:e6:12:94:
         27:90:93:8c:a5:2c:ad:de:d1:10:90:85:1f:99:90:bb:a9:3e:
         f4:74:4a:99:30:88:e0:17:26:4d:00:d0:4f:2b:e2:54:6e:f7:
         de:4e:8f:96:1c:e6:09:fd:05:8a:bc:a6:99:55:d1:d2:23:c5:
         48:f9:5a:68:b7:16:8b:36:ff:70:bb:09:55:9d:eb:c6:14:9b:
         2a:e5:c3:0c:58:32:09:40:02:65:8c:08:1e:16:32:11:46:1d:
         0a:c4:55:07:4d:93:02:4b:53:bc:77:c7:1b:4e:b3:49:ef:d2:
         14:75:dc:5b:29:3c:e4:fc:4b:24:8a:26:d2:ec:1a:fb:ca:c7:
         95:08:3c:84:96:46:a3:7d:a2:f9:b7:76:67:f1:13:92:98:20:
         47:df:a2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:28 2025 by rpki-client